Check for WIKI_CREATE permission, not authentication

Anonymous users might have WIKI_CREATE, or authenticated users might not.

Come to think of it, it would probably be even more correct to check for a fine-grained permission, using the value of "parent" as the resource to check WIKI_CREATE against.  But I'm not totally sure if that's right...