Using Pundit scopes properly to authorize listings.