add first permission to view brackets
permissions model, cancan authorization, move generator to bracket#new