Don't require login to see policy history. Fixes #660