Removed insecure, and allowed certain writes to posts.
updated router.js, added access denied template