update cancan user roles