added logged in restrictions to create post