Switch to CanCan(Can)-based authorization