added CanCanCan gem setup authorization for admins and users