only hard coded emails have permission to create posts
only valid users can add edit delete posts, tested, but added to git ignore file