Bring in Pundit

- Include pundit for authorization
- add flash to application view
- create roles model
nice. we get i18 translations.