Add cancan for authentication
Small design tweak