hide favorite button for not signed-in users

- it was prompting a browser auth pop-up