added authentication/authorization via devise,cancan and rolify