Add cancan dependency for permissions checking
Add Ability class
Check abilities in all but index action
Only show editorial controls to editors
Verify that access permission message is shown
Pin cancan version
Add tests for access to crud actions
Rename edit permission, add helpers to simplify
Test access controls really work for create, update and delete
Merge remote-tracking branch 'origin/add_edit_ability'