Fix most glaring bugs and vulnerabilities

express/routes/api/v1/search.js

@@ -5,11 +5,11 @@ const user = require('../../../middleware/user')
 // Return search results for main search.
 router.get('/main', search.listMainEntries)
 
-// TODO This route assumes existance of user. Make sure to pre check it.
 // Return search results for editor search.
 router.get(
   '/editor/:dictionaryId',
-  user.isDictionaryEditor,
+  user.isAuthenticated,
+  user.canContentEdit,
   search.listEditorEntries
 )