Request permissions

This feature uses permissions defined in Signonotron to hide/prevent certain request forms from being available to users who don't have the appropriate rights.

This introduces the `cancan` gem for managing permissions.