Implement popstate event for history tracking

Fixes #190
Conditionally hide private instance audits. Fixes #184.

Previously the user page (which is global) showed recent edits for all
instances. Now recent edits will include only:

* Public Instances
* Instances that the current view has access to