added cancan authentication to accolades models
adjusted accolades views to links would show only if user has appropriate role
removed extraneous routes