refactor the moderators/members properties on req.user
show a notice when no league is selected
notifications.notFound(), set public to false by default on leaguecreate controller, not null
API auth work-in-progress, totally broken