adding basic authorization with cancan