fixed bug allowing people to see /author/posts without being logged in