Fix for security of publish.php
Merge pull request #138 from bndr/auth_fix

Fix for security of publish.php