Auth close to final.

+ Allow rules set up for all collections.
+ Concept of superAdmin introduced for server admins only.  Only
superAdmins can fuck with the restaurants collection.
+ Schedule items now have a restaurant ID associated with them.
+ BUG:  Some sort of race condition when generating the schedule.  I
think it's causing a re-render and for a moment in time the user isn't
available, so DB queries are rejected.  Returning true for remove until
I can sort it out.

Here's another useful mongoDB query that took me a while to figure out:
db["users"].find({emails:{ $all: [{"address":"bleh@gmail.com",
"verified":false}] }})