Protect unpublished publications in autocomplete.

Addresses #7. NOTE that I'm *removing* all half-finished protection from
autocomplete_species, since this view has no concept of public vs. private
names.