removed user params from conversation views, and made controller always assign current_user
added Grant permissions and tests for conversations
added without_grant to users test setup
reformatted blocks in conversation_test.rb
finished conversation controller and tests for basic functionality: redirects if user isn't signed in, throws 403 if user does not have access, and only gets records user has access to