add CanCan
add ajax and fix many to many for votes