Fix authorization

```ruby
can :manage, :all if user.is_admin
```