All abilities defined and checked
added more abilites for the user role;
checking abilities in admin/application_controller, cart_controller, orders_controller, wishlist_controller;
added route to orders: orders/:id;
changed orders_controller_spec but still needs testing;
added factories to users_factory.rb;
not fully tested;