reworking some permissions. allowing admins to take attendance. disallowing coordinators from cancelling events