abort access to none-auth institute
add frequency to summary box
add institute check to all core routes
Merge branch 'feature/security' into develop