user status now active by default
test data for user status
basic cancan working
first cut at authorization