allowed to post a publication with a POST request in routes.js