more permissions moved to cancan. signed in user can create new race from publication page link