add users with cancan authorize