adds authorized controller to deal with cancan permissions;
adds links to login, signup and logout