First step toward setting up authorization with CanCan