Updated views to only show active vendors.

Forgot about this part of the workflow refactor. Also updated
permission classes on several endpoints, as they were insecure.