move identifier down
add in cancan to make sure user can edit items
rest of cancan config