list cannot be seen if not published

There was a security issue in which a user could just manually type "/list/#" and be able to view a list, even if it was unpublished.
Merge branch 'master' of github.com:jsungholee/faven into viewing_list_security
refactor list security breach
Merge pull request #26 from jsungholee/viewing_list_security

list cannot be seen if not published