added pundit authentication