removed insecure and allowed signed in users to post