Bring in Pundit

- Include pundit for authorization
- add flash to application view
- create roles model
based on rails conventions, this file name should be snake case, not camel case.