Added cancan for user management