fixed cancan for rails4