Add cancan authorisations