in play mode, thread lists includes author-level threads

[Vroo]

https://puzzlehunt.azurewebsites.net/.../play/Threads/PuzzleThreads includes messages from other teams on your puzzles. Those threads should only appear in author or admin mode.

If you click on any of them, you get a 404 but some of the message content was visible on the thread list page. This bug risks exposing someone to content they shouldn't see if they look at a teammate's thread list during a modular hunt.