removed insecure package and added allow rules for posts