updated to include permissions for nonadmins - still need to add ability for nonadmin to change their own status from navbar