enable CanCan
set federation