proper cancan
proper ability settings