Feature/basic user permissions

locked non-logged in users out of every resource. Permissions for admin are define but not implemented. Until I know what permissions the clients wants to set, there is not much point in going further at this point