Got Cancan working and basic roles