authentication for users trying to save and not logged in:
- username/password must be entered
- capability 'edit_posts' is needed
- nonce for CSRF protection