workaround for :through current_user issue

- https://github.com/ryanb/cancan/issues/338