filter #index to only return published posts unless user is an admin