user relationships and cancan integration