adding admin toggle (with a roles system)
adding cancancan!
added ability specs