Add cancan

The cancan gem allows you to specify what actions each user can make.