post_create.js - no session redirects to /auth