Proper data privatisation

*Only relevant data is published to a given user
*Logged out users can see no data
*Logged in users can leave feedback
*Added iron-router