Albums that users are not allowed to view should not be listed

Steps to reproduce:

• create a (super)user without memberships
• create a photoalbum
• browse to the albums page
• notice that the album is there (it shouldn't be)
• click on the album and get a permission error