using cancancan, closing #336