Fix CanCan and mass-assign issue