Add user authentication model

- reseed schools with default group "alumnus"
- add cancan and rolify to support authorization
- add refactor authentication code for front end