Add basic cancan authorization