limit access to edit site to staff. closes #8