use pundit to allow only users who are part of the account that owns the story to access the update method for that story
make sure story_policy doesn't crash if there is no current user
make sure users can only edit stories if they are approved members of the story account
add policies for every model that currently has a controller
make sure every policy has update, create, and destroy
simplify policies and write appropriate tests
add membership policy
finish membership policy and associated tests
remove unnecessary line from guardfile
style fixes
change create? methods on producer and accountable policies to point to update? method
remove unnecessary controller tests
write extremely ugly test for hal_actions#update
use new minitest matcher for policy test
update create? method on membership policy and associated tests
replace ugly hal_actions test with simple one
add space at behest of hound
make it so that admins can delete accounts
merged
Merge pull request #59 from PRX/pundit_experiment

Add pundit gem, StoryPolicy & fake update method