authorization moved from appl creator to cancan

All logic responsible for authorization while creating new appliance is moved
from appliance creator into cancan ability.