make cancan check_authorization work

authorize! sets an instance variable in the controller which later can be used to check if authorization was performed