commented strong params
installed pundit
specs for q/a/c policies
refactor q/controller for pundit
comments controller to pundit + specs
refactor create for pundit in controllers