Cancan permissions working for basic users