Update controllers to restrict actions
Begin improving views
Make views contingent upon user/admin;; refactor class_assignment partial