Updated to use cancancan

Don't merge this until it's been discussed. See: https://groups.google.com/d/msg/hydra-tech/qT3VnJ19FIk/zRT48hGpxkkJ