authenticate_user! for images_controller
user has a role
cancan implementation