Tie polling calls to logged in status

[duckduckgrayduck]

Opening a document on staging while not logged in still generates polling calls:
GET /api/addon_runs/
GET /api/documents/pending/

These count against the 500 anonymous calls per IP, so should be tucked away.

If they go to public search they also get hit with
GET /api/documents/search/saved/?per_page=100

[duckduckgrayduck]

Related to #1321