implemented cancan and fixed omniauth bugs