added test so unauth. user can't see entries