Change visibility of post stati in query

[kevinfodness]

Fixes a bug where all post statuses are returned, not just the public ones, leading to statuses like draft being queried in front-end requests.