Issue #12: authorize resources for cancan