Move access check for credit cards to be handled by CanCan so they are further protected