Include :username as hidden field in mapper#access
Restrict map if username supplied does not exist
Add pin column to users table. Check for pin in mapper#live
Centers flash message
User user_id in current instead of current_user.id
mapper#live checks for valid and correct pin before showing map