Add Pundit and authorisation