Strips out user and sorcery

Change in direction - not going to host active admin within engine,
but instead make resources available to active admin if it is present.
Therefore, access control is irrelevant to engine because it will be
configured in the host app.