you should be using load_and_authorize_resource instead of authorize! scattered about