Introduce cancancan as a Gem dependency for authorization

[jrgriffiniii]

Authorization is currently implemented manually (along with role management), and it would be preferable to include https://github.com/CanCanCommunity/cancancan