added pundit gem and set up some auths