Rails authorization with CanCanCan | Hacker News Reader