API phase exposing all phases

A normal user can see all phases in codabench. It should show only public or the phases belonging to his/her competitions.