added grants
configured cancan