Fix authorization

can :manage, User if user.is_admin is what we have had until now.

We had decided that users with attribute is_admin will be able to create a new conference and see Users list, but not be able to manage every single confeference. 
Please comment.