add some cancan checkes