control authen and roles with devise and cancan. create basic client index page (that's protected)