set up pundit for user model and controller