Added cancan for payment authorization