cancan + rolify, alert below navbar, sells after authentication