Fixed non-logged in users performing actions they shouldn't