Avoids possible permission issues where included content shown in search or preview where the user would not normally have permission to view the included content. Closes #1178
Also changed public user settings to be stored in session rather than DB. Cleaned existing list view type logic.