Use cancan to manage authorization. Add a role model.