add drafts folder for authorized users.

drafts are publicly visible but have relatively unguessable URLs,
so you can share them and get feedback before publishing.