Authorization initial install with roles using CanCanCan