Migrate Authorization to Pundit

Related to #39 and #46.