deployed CanCan to handle athen but have not implement correct_user
add correct user function by do || test required