setup subdomain for api v2, added pundit with list policy