pundit now also works without activesupport. 

2 sepate (nearly same) specs:
 - with activesupport
 - without activesupport. 
shared examples + names-scoped class-constants. not the most elegant way, but works.

String. constantize vendored and used, if activesupport not loaded.