Updating cancan

Some fix and security improvements