Bump cancancan.

This fixes all the errors we got relating to ability.rb:184 with poorly formed SQL:

ActionView::Template::Error: SQLite3::SQLException: no such column: groups.id: SELECT "feeds".* FROM "feeds" WHERE (("feeds"."is_submittable" = 't') OR ("groups"."id" IN (914026446, 456948860)))