adding cancan as dependency
compatible with rails 3.2 and rails 4 only