Added CanCan. Implemented some roles and permissions