added cancancan role blocking to certain buttons and links, added many to many relationship between companies and users