7-2 creating posts. removed insecure