Attempted to make progress on #15. No progress made becasue cancan 2.0 doesn't seem stable and I'm not sure how else to specify attribute permissions.