Adding Cancan and restricting feature set by role