because our role names haven't been fully set yet, this line indicates that the user should be either an admin or a superuser (in initial iterations of KotisAuth, it was called 'vip') to have access.

we'll obviously be required to change this when we decide who ultimately should have access to this page.  It likely will end up as "designer", "admin", "superuser", "account_manager", "production", etc. and we'll probably have to modify the `@has_role?(...)` function to take a list of roles.