1071946

We should also check that the user requesting the csv file is an admin. Maybe do that up at the very top, and bail out early if they're not?