fixed bug relating to simplelazyuser beign passed to a filter by calling id property on request.user; also make some views require staff login which should not have been open