Add pundit gem.  Only allow users to view their own favorites page