CanCan with attendances roles