Fixed security issues with anonymous users being able to add or delete fields

Anonymous users can currently view and change fields on entities, this pr will stop that