Add Authorize mixin to the user model
Use cancan instead of Authorize