Added redirection on unauthorized access by CanCan.
Fixed appointment test and show for roles using "manage" instead of :manage