[Applications] Refactor assertion for application access.

* Now one Assertion handles all access. (Currently only "read" and "delete");
* Small fixes and improvements in Acl and Authentication handling