fixed permissions bug

some cases in views.py were not considering superusers; just
evaluation/reading system owners. now using new permissions module
everywhere.
removed float to decimal conversion

since the upgrade to python 2.7, this conversion is no longer required.
added some tests