show only public repos to unauthenticated users