Removed insecure and add basic allow methods for posts -- not secure, just returning true