add hook to controller for apps that use cancan authorization