Added authorization through cancan. Refactored code to access data through model methods instead of direct query - this is not completely done yet
Improved surgical profile and patient display