diff --git a/src/c3nav/editor/models.py b/src/c3nav/editor/models.py
index 58a03264..60f25bdf 100644
--- a/src/c3nav/editor/models.py
+++ b/src/c3nav/editor/models.py
@@ -165,7 +165,7 @@ class ChangeSet(models.Model):
     def qs_for_request(cls, request):
         qs = cls.qs_base()
         if request.user.is_authenticated:
-            qs = qs.filter(Q(author__isnull=True) | Q(author=request.user))
+            qs = qs.filter(Q(author__isnull=False) | Q(author=request.user))
         else:
             qs = qs.filter(author__isnull=True)
         return qs
diff --git a/src/c3nav/settings.py b/src/c3nav/settings.py
index ad8b991e..69a31876 100644
--- a/src/c3nav/settings.py
+++ b/src/c3nav/settings.py
@@ -181,7 +181,7 @@ USE_TZ = True
 
 REST_FRAMEWORK = {
     'DEFAULT_AUTHENTICATION_CLASSES': (
-        'rest_framework.authentication.TokenAuthentication',
+        'rest_framework.authentication.SessionAuthentication',
     ),
     'DEFAULT_PERMISSION_CLASSES': (
         'rest_framework.permissions.AllowAny',