user can post if signed in