Changing to a more idiomatic CanCan authorization expression