ALM-282 added user roles using the CanCan gem