update cancan protections