Fixing file rspec tests that weren't being run, adding file access control enforcement with CanCan (DHH-80)