Added CanCan and AdminAbility to restrict Admin functions to Admin users.  Created tests for the AdminAbility model.  Fixes #ETDA-7