Remove insecure
Allow to post iff logged in