Add CanCan authorization

Controllers - load_and_authorize_resource
Views - hide admin elements