* Added cancan, first authorization check