adding users controller, routes and abilities, plus abilities for stories