fixed an auth thing, but it needs some UX thinking. Like, right now, anyone can check-in a device. Should only the person who checked it out say so?
added who has it out back to detail.html