added cancan ability tests