add a suite of tests for Pundit