Adding CanCan for authorization, basic ability checks.
Adding better authorization through CanCan, project and roles controllers.