added pundit gem
first pundit policy working. User can only edit their own notes
merged pundit back into main