Add pundit

Added Pundit. 
Replaced Declarative Authorization.
Added controller tests for all of the controllers. 
Updated the way users are added from CAS. I pulled this code from Course Cart.
I renamed `aid` to `assistant` because that makes more sense being in the assistant controller