security check: only show post data to users who are logged in