Authorization with cancan
Added ActiveRecord associations