authorize job edit/destroy methods in rails controller & angular controllers