adds cancan protection to carouselitems
adds cancan auth to carousel_items controller