playing around with cancan, based loosely on http://railsapps.github.com/tutorial-rails-bootstrap-devise-cancan.html