Allow unprivileged view

Closes: #101

templates/macros.html

@@ -86,7 +86,13 @@
   </div>
   <div class="grid-item">{{ item.duration }}</div>
   <div class="grid-item">{{ full_flight_number }}</div>
-  <div class="grid-item">{{ item.booking_reference }}</div>
+  <div class="grid-item">
+    {% if g.user.is_authenticated %}
+      {{ item.booking_reference }}
+    {% else %}
+      <em>redacted</em>
+    {% endif %}
+  </div>
   <div class="grid-item">
     <a href="https://www.flightradar24.com/data/flights/{{ full_flight_number | lower }}">flightradar24</a>
     | <a href="https://uk.flightaware.com/live/flight/{{ full_flight_number | replace("U2", "EZY") }}">FlightAware</a>
@@ -106,6 +112,12 @@
   </div>
   <div class="grid-item">{{ ((item.arrive - item.depart).total_seconds() // 60) | int }} mins</div>
   <div class="grid-item">{{ item.operator }}</div>
-  <div class="grid-item">{{ item.booking_reference }}</div>
+  <div class="grid-item">
+    {% if g.user.is_authenticated %}
+      {{ item.booking_reference }}
+    {% else %}
+      <em>redacted</em>
+    {% endif %}
+  </div>
   <div class="grid-item"></div>
 {% endmacro %}

templates/navbar.html

@@ -31,7 +31,11 @@
         {% endfor %}
       </ul>
       <ul class="navbar-nav ms-auto">
-        <li class="nav-item"><a class="nav-link" href="{{ config.UNIAUTH_URL }}/logout?next={{ request.url | urlencode }}">Logout</a></li>
+      {% if g.user.is_authenticated %}
+        <li class="nav-item"><a class="nav-link" href="{{ url_for("logout", next=request.url) }}">Logout</a></li>
+      {% else %}
+        <li class="nav-item"><a class="nav-link" href="{{ url_for("login", next=request.url) }}">Login</a></li>
+      {% endif %}
       </ul>
     </div>
   </div>