rails app using devise and cancan