add cancancan
update current tests