configures cancan