Adding cancan for authorization. Moved secret_key_base to ENV so its not visible on github ;-)