Add pundit

Added Pundit. 
Replaced Declarative Authorization.
Added controller tests for all of the controllers. 
Updated the way users are added from CAS. I pulled this code from Course Cart.
this is not as much an assistant as an admin, if I am understanding this correctly. good thing this is just a comment.