Add cancan ability

Config