Restrict access to MailerController actions

Here's a fix for issue #175 - a small change, but I did need to alter the MailerController's controller specs so they could handle the different contexts of being accessed by a moderator, normal user, or guest.

Let me know if you have concerns with the way I tested this (or anything else). Thanks for your help!