locked down some files with current_user_can

locked down some files that only admins should need access to.