Get rid of cancan. Use controller based admin permissions.