CanCan isolating users.