Add to serializer only for staff and current user

[pfaffman (Jay Pfaffman)]

@justin

Off the top of my head you may have to do a dance to pull in the current user object and check for a match.

yeah. I can’t figure out how to get the current user. I think what you have will add it if the user (but not the current user) is an admin.