using rails_admin for front-end navigation
customized rails_admin fields (need to block the destructive routes as authentication is not required)
using cancan authorization to block the sensitive routes