Pundit-based user authorization

* Added pundit last version
* Added user policy (rely on single-org-per-user for now)
* Apply policies on new/create/update actions
Make HoundCI happy.
Merge pull request #89 from coopdevs/authorize_user_update

Pundit-based user authorization