added rolify and cancan to manage user access