Add maze level builder (artist already exists.)
Move authorization to ability.rb. Index on position. Use the rails ways instead of local vars.
Fix nested sort so the allowed sort applies to both lists.