Added authorization policy with Pundit in Subjects
Added authorization policy with Pundit in Chapters
Added tests for subject policy