Adding authorization with pundit