Do not hide Reply button for non-authorised users

https://yadi.sk/i/R6Os5yvFYmFTf

p.s. this PR consist some refactors changes
btw, I think we'd better use some abstraction for `req.cookies.forum_username` (e.g. `req.isAuthorized`). what if we one day decide to change cookie name or something?