Use helper_method to hide pundit methods from controller actions