Swap to 1.9 hash syntax and mark downcase_email method

Notice the .ruby-version enforces 1.9.3 so swapped the hash syntax in the User and AccessPermission models to 1.9 mode. Also note that the downcase_email method modifies the email direct so marked it with a bang to indicate this behaviour.