separate employee login from parent login
Merge branch 'master' into prod
throw 401 for unautherized mobile access
allow class creation ignoring managers
Merge branch 'master' into prod