removes ability to destroy our resources without authentication... or at all via api
updates the csv uploader to use garys tagged csv file