Members-only critiques are now actually members-only

When you share work for critique, you can choose who sees it: everyone, Designed members only, or just yourself. We found that the "members only" option was not being enforced -- a submission marked members-only could be viewed by anyone who had the link, without signing in. The work itself, its feedback, and its revision history were all affected.

That is fixed. Members-only submissions now show visitors a sign-in prompt instead of the work, and every layer that serves them -- the page itself, the data behind it, and the caching in between -- checks for a signed-in member first.

If you shared something as members-only, we are sorry it was not enforced as promised. Public and private settings were working correctly throughout; this affected the members-only setting specifically.