Updated to CanCanCan and enabled http auth. Also added 401 and 403 html files to public. Disabled CSRF checks for json messages and updated JobsController to handle json formats."