switched 'abilities' to 'can' for the sake of consistancy with cancan naming scheme