investigate the use of cancan, devise, papertrail, rails_admin