welcome#index: add notice

Sometimes, we will populate the 'notice' variable, especially when there
are errors or other messages from another controller upon a redirect to
this page.
users: limit access to showing of all users
posts: limit access to showing all posts