Authorization logic moved from ApplianceCreator into cancan

Inside `Atmosphere::ApplianceCreator` logic responsible for create authorization occurs. It was moved into cancan ability. 

Fixes redmine 3207 issue.

/cc @nowakowski, @djchrap, @Nuanda - please take a look. Deployed into `dev` - please test.
Nop. Here we are checking if `appliance` can be started and it is assigned into `appliance_set`. Please remember that developer can start `production` `appliance_set` and then we should not allow to spawn appliance created from `development appliance type`.