CanCan - Secure views, Define abilities for site user