More explicit Cancan error handling