got permissions working with before_filter, removed some extraneous admin stuff