Fix using cancan for its forbidden function