Authorization logic moved from ApplianceCreator into cancan

Inside `Atmosphere::ApplianceCreator` logic responsible for create authorization occurs. It was moved into cancan ability. 

Fixes redmine 3207 issue.

/cc @nowakowski, @djchrap, @Nuanda - please take a look