added tests for User Story:5
install cancan and generate ability User Story:17
added authorization to some pages User Story:DDD