adds cancancan authentication