Add pundit for authorization