User Authorization

User authorization without cancan(can)