.js

router.post('/addPost', function (req, res, next) {
  Users.findOne({ "username": req.session.userName }, "canPost", function (Err, doc) {
    if (doc.canPost && req.session.userName) {
      console.log("first if - VALID");
      var newPost = Posts({
        username: req.session.userName,
        theMessage: req.body.message,
        timeStamp: Date().toString()
      });
      console.log("Created Post - VALID");
      newPost.save(function (err) {
        if (err) {
          console.log('Error adding new post ' + err);
          res.render('Messages', { errmessage: err });
        }
        else {
          res.redirect(302, '/messages');
        }
      });
    }
    else if(!req.session.userName) {
      console.log("INVALID");
      res.render('Messages', { errmessage: 'Your Ability to Post has been Disabled' });
    }
    else {
      res.render('logonSplash', { message: 'You must be logged in to add posts' });
    }
  });
});