Authorization logic moved from ApplianceCreator into cancan

Inside `Atmosphere::ApplianceCreator` logic responsible for create authorization occurs. It was moved into cancan ability. 

Fixes redmine 3207 issue.

/cc @nowakowski, @djchrap, @Nuanda - please take a look. Deployed into `dev` - please test.
This might work, but shouldn't we be looking for appliance.appliance_set.user.has_flag?(:developer) # Note: pseudocode.