#137: only return published posts when making ajax calls