Fixed cancan authentication statements in contactlist views