Adds basic authorization with CanCan