add role model and its association with user, specs
add abilities for admin and user, specs