add has_scope gem
add not_member scope to permission
abilities
prepare controllers for abilities