Add cancancan authorization.