cancan: added roles, comment mod enabled