requireUser and requireStaff

Also written: requireUser, requireStaff, getCurrentUser, isStaff

Helper functions that protect pages and server actions by checking who is signed in. `requireUser` redirects signed-out visitors to `/signin`, and `requireStaff` shows non-staff users the 404 page so outsiders can't tell staff pages exist.