update to use cancancan 1.8