user changes

stripped reference to user file for now, included the acl files and did
a loggedin check on the new admin file