Adding link to download accepted sessions CSV

Put it behind authorization since it includes author's emails.
The previous accepted sessions was not showing sessions. It should be
decomissioned as this moves to another application. Once done this
controller (accepted_sessions) can be seriously improved.
This closes #163.