fix handling of cancan auth