Merge new guides form, add authorization to RequirementsController

# What's New?

 * Everything simon did in the previous PR (Github will auto close it)
 * Add authorization to the destroy action in RequirementsController

# What's Next?

 * This PR is going to lower code coverage substantially because of ~10 lines of untested code relating to validation and handling bad document IDs in mutations. I will write tests for these in the morning as I am out of time right now.