got the views working for cancan authorization and roles of user and admin