Fixed new node form shown without permission.

Previous commit on this subject was for AJAX form, this is the
standard form.