[ ] Tokens pages should render using a regular layout template
[ ] We should cleanup assert vs redirect functions for auth handling
[ ] is_teacher is a boolean flag, but most 'role' related things are a run. Would be nice to clean this up... teacher can't be a role, but our functions could be more consistent?