General clean up

Here's where we want pundit to authorize(@list)