fixed some test failures by simplifying a CanCan rule