added explore controller spec
added project policy class with Project priviledges migrated from Ability model
Changed exception handler to handle Pundit and CanCan exceptions using the same method. Let's try a smooth migration.
Changed default application policy to give admin full control and permit show by default.
removed DELETE destroy spec as we don't use this method anymore. Changed spec for protected attributes, when we try to update a protected attribute now we ignore the protected one and update the permited ones.
Projects controller should not have destroy route, we leave this to the admin controller.
Removed the ProjectController policies from CanCan Ability model to ProjectPolicy using Pundit