fix non-login user can edit post