Authorization for leave credit granting

This pull request adds [pundit](https://github.com/elabs/pundit) to our app for authorization in the controller layer. This also adds some authorization on granting leave credits.