no need for super class/too complex
using respond_with, b/c saves a lot of boilerplate coding
current_ability needs to be exposed across all controllers
parent class for consistency reasons and to make sure authentication is performed