simplify authorization check by guarding in the can/cannot CanCan proxy methods