added cancan and rolify for user management