cancan implemented. no real user roles. updated rake task to create user