Rudimentary authorization and authentication, Devise + CanCan