calling controller's load_resource and authorize_resource from load_and_authorize_resource to maintain backwards compatability, even though it's not the most efficient way

moving can definition into ability instance instead of class, this removes ugly instance_exec command

using instance_exec to change scope of can blocks to instance of ability, this is a bit ugly so I may end up using methods instead