Role based Authorization for Appointments using cancan