do not raise RuntimeError 'unauthorized' in ReportsController (use CanCan instead)

Conflicts:
	test/fixtures/scripts.yml
also get rid of the runtimerrors for LevelsController
Merge pull request #352 from code-dot-org/do-not-raise-RuntimeError-unauthorized-again-again

Do not raise runtime error unauthorized again again