adjusted ability.rb and user controller to fix errors when guest user