Make unauthorized API behavior act different (don't forward to login page); make video download page rbust to errors.
use the 'partial' call to do this right.
Merge pull request #166 from bcipolli/remove_duplicate_messages

API requests interact poorly with require_admin