Updated abilities and user validation.
Adjustment to ability, deny non auth'd user to create anything. Touch up forms.