Sorted out abilities and created tests for courses

Messed around with the Ability class, started refining the abilities
for a Course.  Also went through the course views and tightened up the
permission checking.  One change to note is that I renamed the
‘is_enrolled?’ method in the User model to just ‘enrolled?’, it seemed
to read better.

Also added an ability model test for testing abilities.