add pundit and authorize