use cancancan instead of cancan, clean methods - close #14