Clean up submission & property-type tables, add CanCan permission guards for individual actions