Authorisation around suspension, and misc changes
Using Cancan helpers to simplify controller