Authorization logic moved from ApplianceCreator into cancan

Inside `Atmosphere::ApplianceCreator` logic responsible for create authorization occurs. It was moved into cancan ability. 

Fixes redmine 3207 issue.

/cc @nowakowski, @djchrap, @Nuanda - please take a look. Deployed into `dev` - please test.
Hmm, an explicit reference to the identifier of an ActiveRecord always looks suspicious. What's so special about User #1 here?