Authorization for orders
added abilities definition and checking for orders;
added exception rescue for CanCan::AccessDenied in application_controller