Security tweak to further prevent unconfirmed users from using site.
Admin ability to post on behalf of users.
Moved code to update posts with user to after user has confirmed account.