Remove cancan and menu refactor (now works in development)

There are still some issues to solve in admin so we can remove some old hacks in favor of a cleaner pundit solution to all access control behaviors, but this PR should cover everything cancan was doing. So I believe it's already enough to remove the cancan gem.