Implemented authorization with CanCan