Added authorization using cancan