Auth: adding some auth using Authlogic and started some user restrictions to prevent users viewing unwanted action links