add a new post page and include link in header
remove insecure and apply basic restricitons for post
add access denied page for new post