added security configuration for user and poster, only poster sees submit message fields
e2