Fix a vulnerability for missing authn/authz checks in feeds API.

This fixes a vulnerability that allows unauthorized access to archives of private lists without being a member or being authenticated to Hyperkitty.