cancan for sales controller