fix: admins may always see all forums
hm, this should be enough…
fix: current_user may be nil