Improve error message for controller actions without privileges

Fixes #31
Remove unused variable in rescue block