remove insecure and allow inserting post from client side