Updated controllers to include permission and/or role based authorization checks as well as made the access denied page look a little better