Valid users get empty RSS for restricted categories

We are looking good these days.

To add here a bit we also support user api keys and scoped api keys that can unlock secret rss integrations.