using 'cancancan' (for RAILS 4 !)