Apply the latest cancan, and the hack they describe in the github issue.