add initial cancan permission (destroy user)