adding rolify for role based access constraints

This adds in the rolify gem for role based access constraints.  This replaces/augments the simple admin and staff_role flags declared on the user model and allows for future extensibility.