require user to be admin to listen to allUsers notification
changed the privacyOptions to be a whitelist instead of a blacklist to avoid accidental leak of information.
Merge pull request #377 from niklasdstrom/publication-validation

Publication validation