some presentational changes. protected views now require logged in user. lists can now be private, redirects if owner is not logged in user.