fix up edit link and checked that non-public files do not appear to non-signed-in user