removes quotes#index cancan authorization in favor of class-level auth
adds error handling for cancan violations