unifies current_user.is_admin? usage

also: pretty redirecty on users#index for non logged in users
adds graceful redirect on SecurityExceptions
allows experiemnts to be made public