force cancan errors to render JSON
better error message
admin can manage users
add devise invitable and invite api