Rails authorization with CanCanCan | Dark Hacker News