Add Devise authentication, cancancan