fixing an auth bug I introduced when troubleshooting resource_tiles_controller.rb actions