fixed user add, fixed rolify and cancan.  added authorization for controllers

This time I have only made some minor changes.  Have fixed rolify and
cancan.

Next:
Fix department add, so that we can have 3 levels created when the
department is.
Design how directors will see their department(s) and switch between
them.  If there are more than one, then they will need to select which
one to use and then proceed.  — same for normal users - maybe a drop
down in the navbar would be best.