need to add ```authorize! :update_team, current_user```