added CanCan user control