Security update: Hide models from anonymous users (Versions 2.4.x)

Currently, viewing the page source of the admin login will reveal your entire application's database schema in a JS object.

Added a small conditional check around the MODEL_URL_ARRAY declaration that checks whether the user is authenticated and is staff.