Finished Iteration I3. Limit access to admin sections by blocking everything in the Application Controller and whitelisting public accessible portions of the site. Add code to test helper to 'login' when testing controllers.