fixed after_create hook, cancan user authorization through group