removed insecure, and allowed certain writes to posts --commit 7-2

denied access to new posts page when not logged in --commit 7-3