Authorization check done in an after filter

Added a simple check in an after_filter ensuring that authorisation was indeed performed. If called from ApplicationController this method will make sure you explicitly define all the actions that do not need authorisation to be performed, kind of whitelisting approach. The implementation is basically taken from cancan.