Fixed #6363 -- Refactored admin_view decorator

In order to decouple authorization from authentication, we created a separate template for the admin called "unauthorized_user.html", this template will be rendered when a user is not active or is not staff. It will also be rendered when the has_permission method returns False. This needs to be documented...