CanCan secured controllers

This pull request mostly contains enforced CanCan usage in all the controllers. Therefore some abilities where added and all the unnecessary before_filters flying around where removed if possible. Please check this out so we can merge this in the afternoon/evening to keep merge overhead for the other teams minimal