pundit_user should be a helper and hidden as an action