added CanCan support to API, need some helpers to dry up the repetitive code