Updated authenticate_cas_user! to directly render 401 with no response. Setup #permission_denied to handle any authorization block raised by Pundit