some authorization
mountain ribbon has elev
mountain ribbon has elev
authorization with pundit
refactored out decent_exposure, tests pass