added pundit to Gemfile, bundle installed, marked CanCan codes for removal
identified more CanCan codes for replacement by Pundit
a few housecleaning details