added pundit to the app for authorization