add user controller and cancan
add user controller and cancan