fix cancan bug in comments/create and reviews/create