Users can save and unsave properly

Also, a viewer can only save if they're logged in.