added some cancan rules
add a few user views and simple role