Checking out authorization with the cancancan gem