Two unrelated changes

Sorry, bad organization: two totally separate, unrelated things.

1. Use devise's authorization mechanism (`before_filter :authorize_user!` in `application_controller`)
2. Change the field name `in_stock` to `quantity` because `ItemInStock#in_stock` is kind of a bad name.