install gem cancancan
ability class to handle permissions of admin
Merge pull request #24 from coursemology-collab/wangqiang/authorization

authorization using cancancan