PR changes.
check security for posts controller.