CanCan Authorization Updates

Began implementing basic authorization starting with the navigation that now only shows the items that each user should see. For example, a student can't see the 'Attendances' item that a professor can see.

I see need to implement actual security enforcment on the controller level which I will do next.