'role' added to user model. Cancancan used to ensure only Bob can reward staff.