Don't process action links until logged in

Only process action links once the user is logged in.

Fixes #751.