added authorization with cancan
added home page