got entire PAs object in JSON
added cancancan into gemfile
added cancancan for authorization
added ability file