Use pundit instead of cancan