Refactoring authorization with can_moderate