add cancan basic functionality
hide buttons if cannot access functionality
add nice error handling
add load_and_authorize_resource
add a bit more complex can-s and cannot-s