cancan implemented. improved to controller design to be more Restful, and compatible with cancan