views and controllers refactor+cancan