authorize! should be protected method
Make it possible to override admin/roles controller