Changed all route requests to only allow managers access to certain controllers

Added ajax assign for inventory machine to rep
Added ajax un-assign for inventory machine