Authorization with cancan changed for index route