enforce login on all pages, except /accounts/login/
fix login exempt urls to allow FB login
implement checking for instructor-ship
Implement permissions/roles/restrictions thingy across all current views
custom 403 page