OPSCHK-38: 3 new user roles
OPSCHK-38 seeding db with new roles using migration script
Using user_group model to connect user and group
Fixed user role relationship
Add cancan validation to AppsController
Added new acl for contributor