add cancancan helper, closed #7