ensure only logged in user can post as themselves
attempts at saving session in back-end