def activate
    story = Story.find params[:id]
    
    authorize! :update, story