Move to a resource-type URL layout, so we can refer to the original database resources and also to tokens. Implemented an API to confirm a specific permission.
Fix the handling of database creation to obey the CreateDatabase permission
Built a new permissions table, and implemented permissions applied to resource wildcards.
[15] A single completely useless test, just to get started.
Moved control script into its own file, and moved config globals into their own module for cleanup