Add cancan ability.rb, and rescue cancan error with flash notification