wip: sketch out delegation of CRUD authorization

from the VolunteerOpsController to the User model
specs for can_edit
Merge branch 'admin-edit-vol-op' of https://github.com/dcorking/LocalSupport into admin-edit-vol-op
Adding spec for can_change if admin