add some authorization checks to the Wiki

@ormsbee - we talked about this maybe a few weeks ago - I'm not sure if you are doing PR's for LMS still. Maybe @dianakhuang?

@jbau want to take a look as well?

I need to write some unit tests of the middleware changes.