Configure pundit
Create user policy
Migrate UsersController authorisation checks to pundit