working cancan, log in, log out, sign in