Bugfix: bump cancan back to the 2.0 branch.