added permissions to city controller and init_db rake task
added profile_pic method to tenant