handle CanCan::AccessDenied exception