check security for posts controller.