implement cas authentication + user authorization via cancan