REF cancan ability error for users_controller.