admin controller and cancan were added