Do not allow access to controlled pages outside of a login
Fix user find/create. Do not allow signed in users to view other users' campaigns through URLs