Switch from cancan to Pundit for authorization. Fixes #18.