support Pundit for authorization with OmniAuth