fix #24

If we don't have the perms to load a private colleciton, just
don't load any collection. We'll still render.