initialized cancan and authorized some controller actions
added cancan gem. Authorizations to admin users and tests