added CanCan gem and created authorizations