[webui] Introduce pundit as authorization system

I would like to start using pundit as authorization system. It has a lot of advantages to the current way of authorizing things:

* Central place for rules
* Ensures authorization
* "Standard", proven way of authorizing. One place to fix issues with it.
* Default policy

Opinions?