a rails site using devise and cancan