install cancan
cancan fix, define admin role
user roles fix, change to hardcoded roles