Remove current_ability from application controller

Not used anymore, since we migrated to Pundit (#39)