`/tasks/` missing auth and validation

https://content.luanti.org/tasks/234234234/

* Can be visited even if not logged in
  * (I assume there's no check that the task is related to a package you admin either, but that's more complicated and less critical) 
* `234234234` isn't a valid UUID (that's not checked)