cancan tweaks, need to build out auth key for agency