add admin column to user table
generate cancan ability file, initialise user. If admin all to manage all
Add cancans load_and_authorize_resource method to authorise all actions
Hide create, edit and delete from unauthorised users
Was getting ActiveModel::ForbiddenAttributesError when creating a post, so used work around solution found in cancan message board