Added authorization via the Pundit gem.  Configured post operations based on roles.