scaffold for discussion
Cancan for Authorization and some tweaks!