added actor/permission scheme logic to pundit policies and changed views...

... to use `policy` instead of `can_edit?`