added pundit
integrated pundit and AA login
improved some methods and tests, change session storage back to cookie
changed all keys to secrets.yml
Merge pull request #2 from st0012/role

add role column to users and pundit gem for authorization
now only admin can access AA
move keys to secrets.yml for management