change up the code in requests a little, mod the templates a tad
add more of a ACL style auth system to controllers

removal of @admin decorator, and addition of groups paramter to @login
groups are attached to sessions and are pulled from users. represented as a
list in the code. has_perm() is available for both session and user models.

rename a few post/pre hooks
remove print statments
stupid log got in -.-  flesh out a big more of the notes stuff