Refactored proposal. Enabled cancancan

Only the proposal controller is using abilities for now. Everything else is still using verify_{admin|organizer}.