authorizes user for creating and editing retreats
improves retreat authorization testing
removes create link from retreat index page
Merge pull request #1 from steven-ferguson/adding-authorization

Adds authorization for retreats