need to clean up abilities.rb - don't use :manage, how to check nested :index ?