Added roles, used cancan