security applies to entry pages, but not form submission

maybe already fixed by the security overhaul, but I noticed in 1.0.3 that I could add a build definition without being logged in by submitting the form, when the guest didn't have that permission.