Add cancan authorize to UsersController and rescue non-authorized action