Proposals belong to Users

Refines the proposal user relationship
Fill in some security holes in creating, editing, deleting proposals
Fixes bug where sign out button doesn't redirect properly