refactored admin and websites controllers. both now reopen HpacAppController and define routes. This makes it much easier to test, but still keeps things modular. Also added very simple specs.