Review permissions

* Added users controller and index view
* Added pretender for impersonation
* Updated each of the edit pages to only show sub-pages that the user is allowed to see.
* The permissions are now controlled in each pundit policy