Allow only the new Rspec syntax.
Policy class for the User model.
Use Pundit.
Ensure authorization for controller actions.
Rescue not authorized exceptions.
Merge branch 'authorization-solution'