cancan application using bcrypt gem for authentication