added user authentication with pundit