Add coverage for rescue from CanCan AccessDenied