Added authorization via Pundit