Clean up server / player views

[brilee]

WIP; going to add a player index view with some minimal search functionality.

My intent in this reorganization is to make just about every page public, so the tokens+reset buttons are now only shown if you have permissions to reset them. I dunno if this is perhaps a risky strategy; one mistake in the permission check code and tokens start getting displayed everywhere.

[amj]

If it seems like a risky strategy, perhaps it's worth writing a test or two to make sure it's behaving how we expect.