sudo can manage another user
allow users to sign in using their username or email address
handling cancancan's exeption access denied