Added logic and tests to make sure users cannot affiliate records that
they do not own to projects when they create and update them.

record_test adds the test of an :affiliate ability that should only be
allowed when a user owns a record. This is used in the projects_controller
to test record affiliates during project creation.

ALL TESTS PASS