Added cancan authorization to ApplicationController