Refactored roles/access management models and helpers

- removed :admin role, it goes to aerogel-admin module
- added Access#grants? and refactored access route and helper
Refactored access control routes & helpers