finish authorization with gem cancan and gem rolify