only admins should be able to see grades
added the login/logout urls to the browsable API