Add CanCan for restricting user access to certain pages