add cancan for user authorization
add simple authorization so that each user can only view its own profile
rescue from CanCan::AccessDenied
Merge branch 'cancan-auth' into develop
redirect to current user if signed in when visitng sign in or sign up path