apply cancan to projects show page