added pundit auth to dmptemplates controller

added pundit auth to guidance groups

added pundit auth to guidances

added pundit auth to organisations controller

added pundit authorization to users

proof of concept for pundit ...

-got the pundit policy file working
-verified that it blocked/allowed users with correct permissions
-fixed a bug in user model where the magic strings had been poorly defined
-