add cancan testing and resource auth for bicycles
add admin page