add cancan function
add seeds to replace database
add authenticate_user to image