accept pundit as authorization helpers