added pundit - bypassed role? function because Xander said it didn't work and I still have questions about it