Exclude login_required modelresults if user is not authenticated

Found that `login_required` is stored but not used for filtering.
Since parts of the rendered pages are displayed in search results, private content is exposed to anonymous users.
These two lines seems to do the trick.