Added cancan authorization, but there is bug

bug: A person will see an Attributes error if he or she tries to perform the new action for an entity. I am pretty sure this a Rails 4 thing that there is probably a common fix for this.