added administrative access and added controller filters.  We need to decide if we want seperate views for admin/user but for now I added them