authorizing/cancan integration done through inherited resources, working on counts, autorender errors