success! flash….
readme update
writing up some auth specs
Prevent non-logged in users from messing with stuff
fix tests
redirect unless you're the one!