refactor user_has decorator for many abilities check