Add CanCan authorization
Finish CanCan (for now)
Start AJAX implementation
Add AJAX, finish CanCan (minus some testing)