making access denied errors 403 instead of 500
implementing a login procedure with access tokens
Allowing the form to be posted to the controller to add a new post