Kinda a trashy commit, add restricted commands

This also starts to add user auth checking to prevent XSS, but yea... that didn't happen yet.