Added CanCan for resource authorization
Added basic role management