Review permissions

* Added users controller and index view
* Added pretender for impersonation
* Updated each of the edit pages to only show sub-pages that the user is allowed to see.
* The permissions are now controlled in each pundit policy
Another picky thing but `Array(user.affiliations).join(', ')` seems cleaner to me too.