add cancan auth to attendees