restrict post creation to logged in users; ui enhancements