WIP - Migrate authorisation logic to Cancan

before we create the Organisation Admin role,
we should have a framework in place for authorisation.

enter Cancan.

new to cancan ?

[Cancan wiki](https://github.com/ryanb/cancan/wiki)
[Defining abilities](https://github.com/ryanb/cancan/wiki/Defining-Abilities)
[Controller authorisation example](https://github.com/ryanb/cancan/wiki/Controller-Authorization-Example)