added cancancan
successfully added role to users
fixed routes.rb