Add pundit for authorization.