integrated cancan ability check, integrated graceful error reporting