implemented rudimental user login. cancan is partly used