Add admin to users and use cancan for authorization