CRUD authentication with CanCan