Test for restricting another user access
Add CanCan as authorization solution. Tests.