added pundit, set up authorization settings, added New post button