add cancan authentication