refactored navigatin
added Department
employee form includes list of rooms and departments
all controllers authenticate write methods via auth_helper