Updating settings & fixing auth of objects through other objects cancan bug?