prepare cancan ability for persisted permissions
generate new role models and through tables