Replace CanCan with CanCanCan

CanCan seems dead, CanCanCan is the de-facto official fork of it.