hide shop_images link when shop isn't special
ShopImagesController.before_action :authorize!
redirect to root_url if request is unauthorized
Merge branch 'feature/access-control' into develop