Fixed Nonstaff lookups

Changed lookups to show data only if user is authenticated.
Added tests.