do not require authorization for stuff without controllers
add open permissions until we figured out the more specific handling
add auth statement in server loader
lots of fixes to make cancan work as we want. while fixing those issues i also fixed some missing namespacing on controllers.
Merge branch 'authorization-cancan'

Conflicts:
	app/controllers/server_controller.rb
	app/models/ability.rb