Added CanCan based roles authorization