I noticed that the feature layer which manages the Story Map Crowdsource can be accessed by anyone. I have tried following the workflow provided by Limit access to public layers - Crowdsource Reporter | ArcGIS for State Government to try and prevent this issue.
Right now, I have a hosted feature layer that is shared just within my organization, a web map shared with everyone, a web app shared with everyone, and a feature layer shared with everyone and I've configured the limited usage section by adding the urls of the web app and story map. The issue that I am having is that the web app won't open properly now when accessing it offline, as it's asking for me to sign in. I noticed that when I am signed in I cannot access the feature layer using the service URL as I'm still getting the message Token Required, perhaps this is part of the issue? I would appreciate any insight, thanks.