Added authorization cancan to invoices, fixed failing tests