user must be logged in to delete posts