Don't let unauthenticated users see drafts
Add test for showing external links