Using user_group model to connect user and group
Fixed user role relationship
Add cancan validation to AppsController
Added new acl for contributor