implemented Cancan and basic role, but post a new blogpost needs to be fixed