Admin role with Rolify and CanCan (fixes #4)