create cancan ability class