initial fixes from 2012

Mitcho, these are the patches I spoke to you about in November.

1) Make sure only administrators can see the admin panels
2) Add auto login feature to automatically login users who already have a shib session established.

Thanks!

PS: I'm writing a separate email with some new ideas for consideration.