Tightened the auth-code to use 401 when the user is not logged in and 403 if the user is logged in but the role is not sufficient.
Added support for showing client-side messages between reloads.
Enabled javascript for admins watching user profiles.
Enabled an end-point for unoccupying a seat.
Updated client-side code to allow unoccupying seats.
Added ability for users to unoccupy seats.