role added to user and cancan authorization configured