added admin and owner functionality to all pages, yeah

admin for review

I should probably put the authorize_user method into the application.helper.controller or sth.