locked down locations index so users that are not logged in cannot view ...

...all locatins