A non-magical, Rails 4-friendly version of cancan.