add roles to user and add cancan support