Add audit trail for DB changes

[john]

We'll probably want to use the Audited gem, which has built-in integration with Devise, the auth gem we're using: https://github.com/collectiveidea/audited

[john]

Largely overlaps with #1127, though but this is a precursor to that so leaving it open.