Authority

add authorization via pundit
Prefer double-quoted strings unless you need single quotes to avoid extra backslashes for escaping.