Make authorization work with CanCan