Add cancancan to manage user's role permissions

Setup cancancan to manage actions permissions

Define some User methods to check role

Define some abilities