Adding cancan and multi-role based bitmask