Add cancan ability to demo app