Additional rules to the Post Functions

- The username field is always required (in the body of the request), even if it must match the current user.
- If you are given fields (in the body of the request) that were not part of the request you may simply ignore them.
- Document ids may never be altered.
- Documents should never contain the Mongoose __v property, and should use id as the document id instead of _id.