Remove insecure; Allow post permission