added permission checks to creating/editing a tour
Added redirection on tours
fixed redirect
fixed permission check
only verify password length on create, otherwise we can never modify account as a password column doesnt exist
Merge pull request #37 from StevensLighthouse/tour-check-permission

added permission checks to creating/editing a tour