Add Pundit for user roles and authorization