rails g cancan:ability