installed cancan, restricted access to RailsAdmin and some controller actions to Admins only