Added authorization with CanCan