authentication fixes, lists and list_items controllers selection by current user
auto add approve=false if user is not admin