Update cancan authorization