Limit access to admin panel using CanCan. Closes #1