user can only submit post after log in