Authorize-only redux

Adds a separate route to authorize viewing the admin page links (which loads on every page).
Response time for `head 204` is 70ms vs. 900ms for serializing the models. 
--CW && CT
good catch.