sample app 3.1 devise with cancan