Really restrict viewing of the leaderboard to only GDS Editors

- Currently, anyone with any permissions guessing the `/leaderboard`
  route can view the leaderboard as the GDS editor permission check only
  hides the menu option. Hide the page as a whole for those people not
  GDS Editors.
OK. Should this be a notice or an alert, while I'm here? I looked at the whitelist controller and that raises an alert flash message.