Hack to fix themes authorization

cancan gem is really bad handling the index of a nested resource