100% specs, cancan user management restriction, seed users, user.admin?