replace self made authentication with Devise
add admin role with rolify
remove accidental photo uploads
add cancan and generate ability model