cancan and rolify initial configuration