new post form and basic functionality
removed insecure