Fix the cancan and mass-assignment error