Customer belongs to User
Use implicit, current user as parent of customers, rather than nested route
Users.superuser? and CanCan to load and authorize customers based on user
WIP