Fixed CanCan authorization