added basic role functionality using cancan