Messy refactor to inject session data into the views

Adds implicit 'Context' object to all templates (used by main template for authentication logic),
Adds rudimentary authorization security to all pages, and brings OAI-PMH up to snuff