added policy support with pundit