adds roles to user and cancancan