Authorization for orders
added abilities definition and checking for orders;
added exception rescue for CanCan::AccessDenied in application_controller
All abilities defined and checked
added more abilites for the user role;
checking abilities in admin/application_controller, cart_controller, orders_controller, wishlist_controller;
added route to orders: orders/:id;
changed orders_controller_spec but still needs testing;
added factories to users_factory.rb;
not fully tested;
Specs for abilities
added specs for ability.rb which created 4 new shared examples files;
added ability checking to cart_controller, wishlist_controller and orders_controller;
orders_controller_spec's rspec is green now;
added factories;
removed debugging puts
Merge branch 'feature/br-def_check_abilities' into develop
removed commented route