Impersonation (#1325)

* Initial impersonation

* Impersonation audit

* Keep super admin separate

* Remove vscode settings

* Comment cleanup

* Comment out impersonation fixtures for now

* Remove unused controlelr

* Add impersonation testing (#1326)

* Add impersonation testing

* Remove unused method

* Update schema.rb

* Update brakeman

---------

Co-authored-by: Zach Gollwitzer <zach@maybe.co>

config/routes.rb

@@ -110,6 +110,17 @@ Rails.application.routes.draw do
 
   resources :currencies, only: %i[show]
 
+  resources :impersonation_sessions, only: [ :create ] do
+    post :join, on: :collection
+    delete :leave, on: :collection
+
+    member do
+      put :approve
+      put :reject
+      put :complete
+    end
+  end
+
   # Stripe webhook endpoint
   post "webhooks/stripe", to: "webhooks#stripe"