Cancan exception handler