updated user model and added cancan roles