Move access control over to the controller and out of the model.
Merge branch 'lessonbin' of github.com:fuzzie360/coursemology.org into lessonbin