changed cancan abilities for bulk operations and added ability tests to verify