add pundit and set authorizations
add pundit