Adds cancan authorization