added lock icons for NYT and Last.fm

these API endpoints do not work for unauthenticated users