fixed action views for visits

fixed some other minor issues such as the visit/edit.ctp was totally
wrong!
fixed a few permissions