add admin dashboard controller, pundit for authorization