improved authoriseRead
added route, action, forms etc. to support publicly publishing results