install cancan
add multi-role support in cancan
add roles mask migration file