made changes to update user permissions

added debug to update_user_permissions

turns out we do user user_org_roles to determine organisation, re-added

fixed bug in can_<do permission>? functions

updated the organisation_id = (new) in user model, was causing seed to fail

updated funciton to ensure no dupelicates

added functionality to port users from old auth structure to new

ensured users loose roles upon org changing and added depricated tags to roles

updated documentation syntax for some models

removed cancancan and rollify

added granting api to orgs permission

implimenting auth changes in the views

Merge pull request #4 from raycarrick-ed/master ...

bullet lists for questions

explicit bullet style for questions and raw questoin test in form

bugfixes to auth

finished implimenting new authorization scheme in dmptemplates

updated authorization for all controllers ...

-changed from passing through records as feature not supported
-changed 403 error to better reflect what's happening
-added scope to many of the indexes
-added organisation-scope to requests from old org-admin roles
-renamed guidance_groups_policy to guidance_group_policy.rb

added default redirect to 403 page for unauth

added pundit auth to dmptemplates controller

added pundit auth to guidance groups

added pundit auth to guidances

bugfix to ensure organisations auth working

removed depricated controller

added pundit auth to organisations controller

added pundit to users controller

added pundit authorization to users

proof of concept for pundit ...

-got the pundit policy file working
-verified that it blocked/allowed users with correct permissions
-fixed a bug in user model where the magic strings had been poorly defined
-

added magic string and constant structure for auth

installed new gem pundit

changed empty? to blank? as it broke seedfile