manage users using cancancan instead of cancan