preliminary work on blocking users access to stuff that's not theirs
bug fixes in the trips controller
Plug holes in user access
more user bulletproofing
Full non authorized user protection added