adds ability class for cancancan authz