only show authorised pulses

[Haroen Viaene]

right now we show all pulses of the users, but there should be a check whether the .employer is the current employer.

Waiting on punchtime/android#40 to be implemented though