Add authorization using pundit gem