Added pundit to handle authorizations