Require users to log in, allow XHR for feeds.