added default user role in ability.rb