Pundit rolify

I set up authorization using Pundit and Rolify, with a couple of small implementations to start with -- more to come.