controller now has ability to make an access check
Merge branch 'agrilead' of https://github.com/dfritsch/web into agrilead