started making non-admin security happen; added ability to grant admin rights to users
continuing to add non-admin look