Added cancan
Defined has_user? on Group
Defined cancan abilities
Rescue from AccessDenied error and render response
Authorize groups actions
Authorize Employee actions
Authorize Request actions
Merge branch 'authorization'