added CanCan; built roles, users and authorizations tables to handle it; tried a couple of abilities; created a nice div to show flash messages