GET deck and slides should be protected

[peterpeterparker]

GET deck and slides should be protected, specially as long as not published

Then, thru the FEED Api end points, deck (not slides) should be exposed only if published (and public later on)

[peterpeterparker]

Side note: there might be an additional new use case, we should discuss it