Fix #606

Since we load the page in a before filter we need to explicilty authorize! the show action of PagesController. CanCan is not able to handle this otherwise. Also adds specs for the restricted pages feature.

Fixes #606