Added ObjectAuthorization class #837

Added ObjectAuthorization class and the documentation was improved. Use ObjectAuthorization class instead of apply_authorization_limits method.