Adding authorisation

Replacing restful_authentication with omniauth, and adding in CanCan for authorisation.