Use CanCan to authorize your Grape endpoints