hide unpublished posts unless user is logged in