Add diag model and controller

And change the relations among models.

Experiment -> Diag -> Figure
Improve the views
Add access control on resources

Only the user who created the resources can edit those resources. But
admin can always edit all resources.