add current_ability method for default UserAbility model
fix role assignment. add current_ability method to controllers.
extend, not include