now require all actions to authorize with pundit, and all indexes are required to check scope. Made people factory, started person policy.