[yutt]

Well, I replaced the:

bb_auth();

line with:

if (!bb_current_user_can('administrate')) {bb_auth();}

Hopefully that is secure, everything seems to work now. Huzzah!