installed cancan, indes now working showing only owned records