modified notes started on user authorization
user authorization seems to work
updated notes
added redirect for when user is not authorized to view something