updated views to use pundit instead of cancan