making create posts secure