rails 3.2.1 devise authentication with cancan