Fixed non-admins being able to create new departments, changed user
authentication from two if-statements to one.