Added access authorization with Pundit