User Contorller with CanCan 'load_and_authorize_resource'