StudiesController: set owner, only allow curators & admins to change records
AdminController: add action to toggle curator status