CanCanCan setup for authorization
Authorization testing mostly completed