added user agent migration and using can can for authorization