tweaked cancancan permissions fixed CSS bugs