implement ability.rb and can? in views