Use CanCanCan for oauth clients controller