added new spec for permissions, added cancan gem, added authorization helper and capybara helpers