Added Pundit for user authorization