properly handle public repos and non-member access
only show URLs if they are enabled
added ability to add protected refexes to a repository that only managers can push to