add cancan gem
add cancan abilities to vendor controller