updated Authorization with CanCan in application_controller.rb, users_controller.rb and ability.rb