early outs for privs

no need to check if empty array is passed in, happens if there are no
unread topics
remove dupe cids before checking for privileges
fixed typo
fixed to account header
fix online users page

insert users before the anon box if there is one
closes #1932