added CanCan and basic roles: member, moderator, admin