Authority

add authorization via pundit
Use the new Ruby 1.9 hash syntax.