Add access restrictions to some of the pages in the system

There really needs to be a way of adding GET or POST parameters to ajax-loaded
pages though, to provide some way of making sure people that aren't allowed to
access the pages are completely unable to see the forms.