Adds CanCan ability model to enforce user permissions.