super user role check should be the first gate in cancan check for create. If a user has the super-role, we don't need to check curator groups they're in