Fix permissions for #658.

Also fix a bug where booleans were getting stored inconsistenly in the config.
Remove the template instance var from the controller.
We've been using delete, not destroy (like CanCan prefers).
Restrict screen owners to the current user or groups you have screen admin control in.

Close #658.
Merge branch 'master' of github.com:concerto/concerto