Harry/view permissions

no one but coordinators can see the coordinator dashboard
only signed in recipients can create interests
but anyone can donate
Try DRYing out this code with a ```before_action``` and a private method that does authorization :)