refactoring using cancancan helper - close #7