fix a couple of issues about cancan and devise (wip)