add working 'CanCanCan' gem