Fixed cancan abilities in controllers, and views changes