Add roles to candidate actions so that  Assessors can't create or access candidate info. Also make the user_aware_controller throw a helpful exception if there isn't a user present.
Moved the helper methods that add users to session to a helper class.
Merge pull request #19 from cyrusinnovation/add_roles_to_candidate_actions

Add roles to candidate actions