adds pretty errors, cancan, and authorizes views through controller

Pretty errors helps debugging in the browser.
Cancan helps prevent signed-in users from seeing other users' info.
Authorizes based on seing the survey, or seeing themself.
See ability.rb for the can can specifics.