Use cancan to control access
Improve the test suite. Add an integration test for adding an accession