Restrict ticket updating to only those who have permission.
Removed spec example autocreated by rails g controller from earlier in reading, book is not accounting for it.