Refactor admin authentication into lib/auth.js module
Implement updating document approval

editing document if you're not the admin resets approval
Fixes #16