Added in basic authentication of controller actions behind devise login

Moving forward will have to distinguish between a site admin (VAH) and regular users who control their organization profile