Fixes over-zealous authorize() so public pages work properly, closes #14