Fix a bug where any one (signed in or not) can always see `newjob`