changes controllers for roles.  CanCan should remove this need.